Method and System for Implementing an External Trusted Platform Module

1. A method for implementing an external trusted platform module, comprising: establishing a connection with a remote host device via a remote interface; receiving a state message specifying a trusted platform module (TPM) state parameter to be used by an external TPM; receiving a request for a TPM function from the remote host device via the remote interface; processing the request for the TPM function received from the remote host device using the received TPM state parameter; generating a response to the request for the TPM function based on the processing of the request for the TPM function received from the remote host device; and sending the response to the request for the TPM function to the remote host device via the remote interface.

2. The method of claim 1 , further comprising receiving at least one TPM state parameter to be used when processing the request for the TPM function received from the host device via the remote interface.

3. The method of claim 1 , wherein processing the request for the TPM function received from the host device via the remote interface comprises processing the request for the TPM function received from the host device via the remote interface with a component selected from the group consisting of a software based TPM emulator, a hardware based TPM emulator, a hardware and software based TPM emulator, and a TPM microchip.

4. The method of claim 1 , wherein establishing a connection with a remote host device via a remote interface comprises establishing a connection with a remote host device via a remote interface that cryptographically binds the external platform module and the host device.

5. The method of claim 1 : wherein the request for the TPM function received from the host device is encrypted; and further comprising encrypting the response to the request for the TPM function before sending the response to the request for the TPM function to the host device via the interface.

6. The method of claim 1 , further comprising: receiving a measurement value generated by an internal TPM within the remote host device; and extending the core root of trust of the external TPM based on the measurement value.

7. The method of claim 1 , wherein the TPM state parameter is based on a simulation state of the remote host device used to test the TPM function in the simulation state.

8. The method of claim 1 , wherein receiving a state message specifying a trusted platform module (TPM) state parameter to be used by an external TPM comprises receiving a state message from a device separate from the remote host device, the state message specifying a trusted platform module (TPM) state parameter to be used by an external TPM.

9. A method for implementing an external trusted platform module, comprising: establishing a connection with an external trusted platform module (TPM) device via a remote interface; transmitting a state message specifying a TPM state parameter to be used by the external TPM to process a request for a TPM function; generating the request for the TPM function; transmitting the request for the TPM function to the external TPM device via the remote interface; and receiving a response to the request for the TPM function from the external TPM device via the remote interface.

10. The method of claim 9 , further comprising rebooting after establishing the connection with the external TPM device via the remote interface.

11. The method of claim 9 , wherein the external TPM device comprises a component selected from the group consisting of a software based TPM emulator, a hardware based TPM emulator, a hardware and software based TPM emulator, and a TPM microchip.

12. The method of claim 9 : further comprising encrypting the request for the TPM function before sending the request for the TPM function to the external TPM device via the remote interface; and wherein the response to the request for the TPM function from the external TPM device is encrypted.

13. The method of claim 9 , further comprising determining whether to route the request for the TPM function to an internal TPM microchip or to transmit the request for the TPM function to the external TPM device via the remote interface.

14. A system for implementing an external trusted platform module, comprising: an interface configured to: establish a connection with a remote host device via a remote interface; and receive a state message specifying a trusted platform module (TPM) state parameter to be used by an external TPM; receive a request for a TPM function from the remote host device via the remote interface; and a processor coupled to the interface and configured to: process the request for the TPM function received from the remote host device using the received TPM state parameter; generate a response to the request for the TPM function based on the processing of the request for the TPM function received from the remote host device; and send the response to the request for the TPM function to the remote host device via the remote interface.

15. The system of claim 14 , wherein the interface is further configured to receive at least one TPM state parameter to be used when processing the request for the TPM function received from the host device via the remote interface.

16. The system of claim 14 , wherein the processor configured to process the request for the TPM function received from the host device via the remote interface comprises a processor configured to process the request for the TPM function received from the host device via the remote interface with a component selected from the group consisting of a software based TPM emulator, a hardware based TPM emulator, a hardware and software based TPM emulator, and a TPM microchip.

17. The system of claim 14 , wherein the interface to configured to establish a connection with a remote host device via a remote interface comprises an interface configured to establish a connection with a remote host device via a remote interface that cryptographically binds the external platform module and the host device.

18. The system of claim 14 wherein: the request for the TPM function received from the host device is encrypted; and the processor is further configured to encrypt the response to the request for the TPM function before sending the response to the request for the TPM function to the host device via the interface.

19. A system for implementing an external trusted platform module, comprising: an interface configured to establish a connection with an external trusted platform module (TPM) device via a remote interface; and a processor coupled to the interface and configured to generate a request for a TPM function; and the interface further configured to: transmit a state message specifying a TPM state parameter to be used by the external TPM to process the request for the TPM function; transmit the request for the TPM function to the external TPM device via the remote interface; and receive a response to the request for the TPM function from the external TPM device via the remote interface.

20. The system of claim 19 , wherein the processor is further configured to reboot after establishing the connection with the external TPM device via the remote interface.

21. The system of claim 19 , wherein the external TPM device comprises a component selected from the group consisting of a software based TPM emulator, a hardware based TPM emulator, a hardware and software based TPM emulator, and a TPM microchip.

22. The system of claim 19 : wherein the processor is further configured to encrypt the request for the TPM function before sending the request for the TPM function to the external TPM device via the remote interface; and wherein the response to the request for the TPM function from the external TPM device is encrypted.

23. The system of claim 19 , wherein the processor is further configured to determine whether to route the request for the TPM function to an internal TPM microchip or to transmit the request for the TPM function to the external TPM device via the remote interface.

24. Logic embodied in a non-transitory computer readable medium, the computer readable medium comprising code configured to: establish a connection with a remote host device via a remote interface; receive a state message specifying a trusted platform module (TPM) state parameter to be used by an external TPM; receive a request for a TPM function from the remote host device via the remote interface; process the request for the TPM function received from the remote host device using the received TPM state parameter; generate a response to the request for the TPM function based on the processing of the request for the TPM function received from the remote host device; and send the response to the request for the TPM function to the remote host device via the remote interface.

25. The medium of claim 24 , wherein the code is further configured to receive at least one TPM state parameter to be used when processing the request for the TPM function received from the host device via the remote interface.

26. The medium of claim 24 , wherein the code configured to process the request for the TPM function received from the host device via the remote interface comprises code configured to process the request for the TPM function received from the host device via the remote interface with a component selected from the group consisting of a software based TPM emulator, a hardware based TPM emulator, a hardware and software based TPM emulator, and a TPM microchip.

27. The medium of claim 24 , wherein the code configured to establish a connection with a remote host device via a remote interface comprises code configured to establish a connection with a remote host device via a remote interface that cryptographically binds the external platform module and the host device.

28. The medium of claim 24 wherein: the request for the TPM function received from the host device is encrypted; and the code is further configured to further comprising encrypting the response to the request for the TPM function before sending the response to the request for the TPM function to the host device via the interface.

29. Logic embodied in a non-transitory computer readable medium, the computer readable medium comprising code configured to: establish a connection with an external trusted platform module (TPM) device via a remote interface; transmit a state message specifying a TPM state parameter to be used by the external TPM to process a request for a TPM function; generate the request for the TPM function; transmit the request for the TPM function to the external TPM device via the remote interface; and receive a response to the request for the TPM function from the external TPM device via the remote interface.

30. The medium of claim 29 , wherein the code is further configured to reboot after establishing the connection with the external TPM device via the remote interface.

31. The medium of claim 29 , wherein the external TPM device comprises a component selected from the group consisting of a software based TPM emulator, a hardware based TPM emulator, a hardware and software based TPM emulator, and a TPM microchip.

32. The medium of claim 29 : wherein the code is further configured to encrypt the request for the TPM function before sending the request for the TPM function to the external TPM device via the remote interface; and wherein the response to the request for the TPM function from the external TPM device is encrypted.

33. The medium of claim 29 , wherein the code is further configured to determine whether to route the request for the TPM function to an internal TPM microchip or to transmit the request for the TPM function to the external TPM device via the remote interface.

34. A system for implementing an external trusted platform module, comprising: means for establishing a connection with a remote host device via a remote interface; means for receiving a state message specifying a trusted platform module (TPM) state parameter to be used by an external TPM; means for receiving a request for a TPM function from the remote host device via the remote interface; means for processing the request for the TPM function received from the remote host device using the received TPM state parameter; means for generating a response to the request for the TPM function based on the processing of the request for the TPM function received from the remote host device; and means for sending the response to the request for the TPM function to the remote host device via the remote interface.

35. A system for implementing an external trusted platform module, comprising: means for establishing a connection with an external trusted platform module (TPM) device via a remote interface; means for transmitting a state message specifying a TPM state parameter to be used by the external TPM to process a request for a TPM function; means for generating the request for the TPM function; means for transmitting the request for the TPM function to the external TPM device via the remote interface; and means for receiving a response to the request for the TPM function from the external TPM device via the remote interface.